$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft File: er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json) Hash identifier: nnsf+qUgCNZsWSV/mUoq+o07Hwew9+P+d0ndkcQq+p0= Subject key identifier: B9:55:B5:A3:CE:31:37:47:E8:A8:B0:87:25:60:7D:50:9B:6B:30:08 Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft Manifest number: 0498 Signing time: Sat 31 May 2025 00:11:41 +0000 Manifest this update: Sat 31 May 2025 00:11:40 +0000 Manifest next update: Sat 07 Jun 2025 00:11:40 +0000 Files and hashes: 1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: CPXvCW4fqiqOIKnhgINC2tiB5LOfU0xYgxPp4K7LZVo=) 2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: 4XKTIg0bVBrjQ4gKKV2hpe4LJ1uznZVmF62ttuEN2yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Validity Not Before: May 31 00:11:40 2025 GMT Not After : Jun 7 00:11:40 2025 GMT Subject: CN=683a493c-359c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:94:1f:98:73:47:6f:51:bf:bb:17:29:01: eb:9e:72:e1:ce:d9:16:68:6e:6a:0c:95:2b:d0:a2: 03:d2:d2:b8:e5:c4:80:75:7b:48:73:f7:11:7e:96: f2:db:22:89:7e:77:9a:f9:6f:33:c6:f0:29:49:18: bd:e7:b9:7b:2f:42:bb:e0:2f:bd:95:5a:d7:db:31: 1d:bb:ab:4f:b2:a3:45:83:a1:30:27:28:b6:55:a8: a3:d8:0c:e4:ea:85:1e:83:ba:5b:51:1b:25:3c:7a: f6:91:4b:9c:29:98:e8:41:62:4e:4d:02:d8:c4:89: 9b:23:76:d3:aa:0a:ec:c6:ec:93:a0:4f:3a:a2:03: df:29:62:a5:46:af:5c:e0:8e:37:d6:3b:d7:6e:c4: 20:af:f2:ec:d4:12:0c:91:cc:82:5f:89:0d:a8:93: 3f:6a:57:86:82:2f:aa:19:fe:2b:ec:9b:e7:9d:a8: 7c:b8:b6:db:8c:90:dc:83:31:ed:ff:30:4e:15:3f: 3e:f0:d8:73:dc:3e:01:ea:fd:71:8b:e3:77:be:b5: d3:84:bb:0d:63:a1:18:2f:36:35:ec:28:4f:af:b3: 7e:3d:ed:1e:ca:ed:e6:a8:47:89:7e:ec:2d:84:19: 98:7b:dd:c1:10:c2:46:81:4d:60:29:23:43:f8:ed: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:55:B5:A3:CE:31:37:47:E8:A8:B0:87:25:60:7D:50:9B:6B:30:08 X509v3 Authority Key Identifier: keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:73:d4:8a:98:bf:02:a9:61:45:7d:72:05:90:a8:37:b8:eb: ff:77:4a:5b:47:c2:4e:88:cb:9c:b8:f8:a8:a9:0c:89:48:9c: 85:ea:0e:34:af:8f:e2:a1:58:52:7c:d5:88:53:2a:0e:23:3a: ea:47:76:d7:b2:ba:85:51:2a:ba:68:d1:37:cf:e2:11:68:0a: 15:e9:3c:ee:d9:71:5a:cf:ca:ef:d8:45:9b:f1:65:a2:53:7a: a8:fc:12:8d:12:eb:2a:12:e1:97:68:17:e9:58:da:94:1b:08: 43:a6:3f:2b:c6:d6:92:e8:e7:29:8d:a2:16:da:72:12:79:18: f8:03:e6:64:0d:d4:b7:63:12:1a:75:6b:95:44:d5:23:89:d9: ae:d4:47:fc:c9:93:31:de:47:50:cf:a7:30:dd:70:79:64:2a: e1:f1:17:8d:c9:08:45:37:0d:b1:c1:73:5a:57:b3:de:f1:97: d2:0d:10:3e:11:43:5f:02:96:88:12:4e:7f:47:e0:76:b6:9b: 48:74:0f:68:76:1f:ad:c1:d3:9b:53:24:e5:a7:4e:39:ab:0c: 29:37:36:f3:d1:38:a2:da:43:64:b5:e2:e5:35:82:3c:1b:57: e6:95:36:6a:c5:92:36:c7:1d:8a:9c:a2:fc:f6:6b:7c:1f:17: 83:3c:d6:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURGQkQxMTAvBgNVBAUTKDdBQkVFRTY3QUM2MTMxM0ExRTFGQThCMzg2NUQzRkIx RjYzNEY3NDMwHhcNMjUwNTMxMDAxMTQwWhcNMjUwNjA3MDAxMTQwWjAYMRYwFAYD VQQDEw02ODNhNDkzYy0zNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3qUH5hzR29Rv7sXKQHrnnLhztkWaG5qDJUr0KID0tK45cSAdXtIc/cRfpby 2yKJfnea+W8zxvApSRi957l7L0K74C+9lVrX2zEdu6tPsqNFg6EwJyi2Vaij2Azk 6oUeg7pbURslPHr2kUucKZjoQWJOTQLYxImbI3bTqgrsxuyToE86ogPfKWKlRq9c 4I431jvXbsQgr/Ls1BIMkcyCX4kNqJM/aleGgi+qGf4r7Jvnnah8uLbbjJDcgzHt /zBOFT8+8Nhz3D4B6v1xi+N3vrXThLsNY6EYLzY17ChPr7N+Pe0eyu3mqEeJfuwt hBmYe93BEMJGgU1gKSND+O39bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlVtaPO MTdH6KiwhyVgfVCbazAIMB8GA1UdIwQYMBaAFHq+7mesYTE6Hh+os4ZdP7H2NPdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REZCRC9EMzRBNjgzMDM4 NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1Ub2VINml6aGwwX3NmWTA5 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyN3VaNnhoTVRvZUg2aXpobDBfc2ZZMDkwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REZCRC9EMzRBNjgzMDM4NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1U b2VINml6aGwwX3NmWTA5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqc9SKmL8CqWFFfXIFkKg3uOv/d0pbR8JOiMucuPioqQyJSJyF6g40 r4/ioVhSfNWIUyoOIzrqR3bXsrqFUSq6aNE3z+IRaAoV6Tzu2XFaz8rv2EWb8WWi U3qo/BKNEusqEuGXaBfpWNqUGwhDpj8rxtaS6OcpjaIW2nISeRj4A+ZkDdS3YxIa dWuVRNUjidmu1Ef8yZMx3kdQz6cw3XB5ZCrh8ReNyQhFNw2xwXNaV7Pe8ZfSDRA+ EUNfApaIEk5/R+B2tptIdA9odh+twdObUyTlp045qwwpNzbz0Tii2kNkteLlNYI8 G1fmlTZqxZI2xx2KnKL89mt8HxeDPNZZ -----END CERTIFICATE-----Generated at Sat May 31 17:06:29 2025 by rpki-client